Commit message (Collapse) | Author | Age | Files | |
---|---|---|---|---|
* | typofix | Guilhem Moulin | 2021-02-20 | 1 |
| | ||||
* | Symlink $(sysconfdir)/apache2/conf-available/lacme.conf → ↵ | Guilhem Moulin | 2021-02-20 | 1 |
| | | | | | | | ../../lacme/apache2.conf. This is useful for enabling the snippet with `a2enconf lacme`, cf. https://bugs.debian.org/955859 . | |||
* | Makefile wibble | Guilhem Moulin | 2021-02-20 | 1 |
| | ||||
* | Update staging hierarchy. | Guilhem Moulin | 2021-02-20 | 1 |
| | | | | Cf. https://community.letsencrypt.org/t/staging-hierarchy-new-root-cert/145677 . | |||
* | Makefile: set executable bit for $(bindir)/lacme-accountd and $(sbindir)/lacme. | Guilhem Moulin | 2021-02-18 | 1 |
| | ||||
* | client: use "lacme-client/$VERSION" as User-Agent header. | Guilhem Moulin | 2021-02-18 | 1 |
| | ||||
* | Add certs-staging/fake*.pem for tests using the staging environment. | Guilhem Moulin | 2021-02-18 | 1 |
| | | | | See https://letsencrypt.org/docs/staging-environment/ . | |||
* | Makefile: new 'release' target. | Guilhem Moulin | 2021-02-15 | 1 |
| | ||||
* | Add (self-signed) ISRG Roots to the CA bundle. | Guilhem Moulin | 2021-02-15 | 1 |
| | | | | | | | | | | | | | | | This allows us to fully validate provided X.509 chains using that self-contained bundle, regardless of which CAs is marqued as trusted under /etc/ssl/certs. Also, remove cross-signed intermediate CAs from the bundle as they're useless in a self-contained bundle. Also, remove decomissioned intermediate CAs Authority X3 and X4 from the bundle. This change bumps the minimum OpenSSL version to 1.1.0 (for verify(1ssl)'s ‘-trusted’ and ‘-show_chain’ options). | |||
* | Make unprivileged user/group for the internal client resp. webserver ↵ | Guilhem Moulin | 2020-12-09 | 1 |
| | | | | configurable. | |||
* | Use upstream certicate chain instead of an hardcoded one.upstream/0.7 | Guilhem Moulin | 2020-11-26 | 1 |
| | | | | | | | | | | | | | This is a breaking change. The certificate indicated by 'CAfile' is no longer used as is in 'certificate-chain' (along with the leaf cert). The chain returned by the ACME v2 endpoint is used instead. This allows for more flexbility with respect to key/CA rotation, cf. https://letsencrypt.org/2020/11/06/own-two-feet.html and https://community.letsencrypt.org/t/beginning-issuance-from-r3/139018 Moreover 'CAfile' now defaults to @@datadir@@/lacme/ca-certificates.crt which is a concatenation of all known active CA certificates (which includes the previous default). | |||
* | Makefile: Use variables for target directories etc. | Guilhem Moulin | 2020-08-04 | 1 |
| | ||||
* | Change default libexec dir from /usr/lib/lacme to /usr/libexec/lacme. | Guilhem Moulin | 2020-08-03 | 1 |
| | ||||
* | Install lacme manpage to section 8. | Guilhem Moulin | 2020-08-03 | 1 |
| | | | | As it's a system command, see hier(7) for details. | |||
* | Makefile: Major refactoring, add install and uninstall targets. | Guilhem Moulin | 2020-08-03 | 1 |
| | | | | Honor BUILD_DOCDIR and DESTDIR variables. | |||
* | factor out jq-script from Makefile | Benjamin Tietz | 2020-08-03 | 1 |
| | | | | the script is just a plain copy, but now accessible without make | |||
* | Fix manpage generation with pandoc >=2.1 | Guilhem Moulin | 2018-04-26 | 1 |
| | ||||
* | Copy snippets/*.conf to /etc/lacmeupstream/0.4 | Guilhem Moulin | 2017-07-28 | 1 |
| | ||||
* | Fix generation of manpages with pandoc >=1.18 | Guilhem Moulin | 2017-07-28 | 1 |
| | ||||
* | s/lacme-certs.d/lacme-certs.conf.d/upstream/0.2 | Guilhem Moulin | 2016-12-05 | 1 |
| | ||||
* | "config-certs" now points to a list of files or directories. | Guilhem Moulin | 2016-12-05 | 1 |
| | ||||
* | Install lacme(1) into /usr/sbin. | Guilhem Moulin | 2016-06-14 | 1 |
| | ||||
* | Move X.509 certs to a separate directory. | Guilhem Moulin | 2016-06-14 | 1 |
| | ||||
* | Convert the manpages to pandoc(1) markdown. | Guilhem Moulin | 2016-06-14 | 1 |
| | ||||
* | Rename ‘letsencrypt-tiny’ to ‘lacme’. | Guilhem Moulin | 2016-06-13 | 1 |
| | ||||
* | Install LE X[34] intermediate CA. | Guilhem Moulin | 2016-03-27 | 1 |
| | ||||
* | Add a Makefile. | Guilhem Moulin | 2016-03-02 | 1 |